Security advisories

medium2022-04-12

XSS in HEEx class attributes

View chart →

phoenixframework/phoenix_html · GHSA-j3gg-r6gp-95q2

critical2022-04-12

CVE-2017-20166-Ecto missing `is_nil` requirement

View chart →

elixir-ecto/ecto · GHSA-2xxx-fhc8-9qvq

critical2022-04-12

CVE-2020-15150-Remote Code Execution in paginator

View chart →

duffelhq/paginator · GHSA-w98m-2xqg-9cvj

high2022-04-12

CVE-2022-1295-Prototype Pollution in fullpage.js

View chart →

alvarotrigo/fullpage.js · GHSA-vpgw-ffh3-648h

high2022-04-12

CVE-2021-40219-Code Injection in Bolt CMS

View chart →

bolt/core · GHSA-gprh-7767-cw39

high2022-04-11

Denial of Service (DoS) in Nokogiri on JRuby

View chart →

sparklemotion/nokogiri · GHSA-gx8x-g87m-h5q6

medium2022-04-11

XML Injection in Xerces Java affects Nokogiri

View chart →

sparklemotion/nokogiri · GHSA-xxx9-3xcr-gjj3

high2022-04-11

Out-of-bounds Write in zlib affects Nokogiri

View chart →

sparklemotion/nokogiri · GHSA-v6gp-9mmm-c6p5

high2022-04-11

CVE-2022-24836-Nokogiri Inefficient Regular Expression Complexity

View chart →

sparklemotion/nokogiri · GHSA-crjr-9rc5-ghw8

medium2022-04-11

CVE-2022-1291-Cross-site Scripting in tableexport.jquery.plugin

View chart →

hhurz/tableexport.jquery.plugin · GHSA-j636-crp3-m584

high2022-04-09

CVE-2022-1219-SQL Injection in Pimcore

View chart →

pimcore/pimcore · GHSA-6gm7-j668-w6h9

high2022-04-09

CVE-2021-43515-Improper Neutralization of Formula Elements in a CSV File in Kimai 2

View chart →

kevinpapst/kimai2 · GHSA-64fq-9c6w-rq44

high2022-04-08

CVE-2022-24827-SQL Injection in elide-datastore-aggregation

View chart →

yahoo/elide · GHSA-8xpj-9j9g-fc9r

medium2022-04-08

CVE-2022-24820-Unauthenticated user can list hidden document from multiple velocity templates in XWiki

View chart →

xwiki/xwiki-platform · GHSA-qpp2-2mcp-2wm5

medium2022-04-08

CVE-2022-24821-Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx

View chart →

xwiki/xwiki-platform · GHSA-ghcq-472w-vf4h

medium2022-04-08

CVE-2022-24819-Unauthenticated user can retrieve the list of users through uorgsuggest.vm

View chart →

xwiki/xwiki-platform · GHSA-97jg-43c9-q6pf

high2022-04-08

CVE-2020-1469-Infinite loop in .Net Bond

View chart →

microsoft/bond · GHSA-rqrc-8q8f-cp9c

critical2022-04-08

CVE-2022-27818-Insecure temporary file usage in SWHKD

View chart →

waycrate/swhkd · GHSA-r3r5-jhw6-4634

medium2022-04-08

CVE-2022-27819-Unsafe parsing in SWHKD

View chart →

waycrate/swhkd · GHSA-h6xw-mghq-7523

critical2022-04-08

CVE-2021-43421-elFinder Unrestricted File Upload vulnerability

View chart →

studio-42/elfinder · GHSA-x4jx-hjwf-gc99